Remote Web App Security Engineer (WAF & DevSecOps)

Lightology, LLC; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health, Dental & Vision Insurance

401(k) Retirement plan

Paid vacation

Sick time

Company holidays

Life & AD&D Insurance

Disability insurance

Job summary

Lightology is seeking an experienced Web Application Firewall Engineer to secure its web assets by integrating security into the SDLC and defending enterprise applications from evolving threats. The ideal candidate will have strong AppSec experience, vulnerability management, and DevSecOps chops.

Responsibilities include embedding security in SDLC, performing vulnerability assessments, threat modeling, configuring WAFs (Barracuda), and collaborating with developers and DevOps to raise the

Qualifications

• Experience in Application Security and secure SDLC practices.
• Proficient in vulnerability assessments and threat modeling.
• Knowledge of OWASP Top 10 and remediation techniques.
• Experience configuring or supporting Web Application Firewalls.
• Experience integrating security into CI/CD and DevSecOps environments.

Responsibilities

• Embed security throughout SDLC.
• Perform web application vulnerability assessments, penetration support, and threat modeling.
• Identify, prioritize, and remediate app security vulnerabilities.
• Implement secure coding standards aligned with OWASP Top 10.
• Configure and maintain WAF and app security controls (Barracuda WAF).
• Monitor application logs and investigate security events.
• Collaborate with developers and DevOps to improve security posture.
• Develop security documentation, recommendations, and remediation guidance.

Skills

AppSec

Web security

Threat modeling

Vulnerability assessments

DevSecOps

OWASP Top 10

Barracuda WAF

CI/CD security

Security documentation

Tools

Barracuda WAF

CI/CD tooling

Job description

Lightology is seeking an experienced Web Application Firewall Engineer to secure its web assets by integrating security into the SDLC and defending enterprise applications from evolving threats. The ideal candidate will have strong AppSec experience, vulnerability management, and DevSecOps chops.

Responsibilities include embedding security in SDLC, performing vulnerability assessments, threat modeling, configuring WAFs (Barracuda), and collaborating with developers and DevOps to raise the